CVE-2013-6649: Debian Linux

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Google Chrome: up to and including 32.0.1700.101; version 32.0.1700.0 only; version 32.0.1700.2 only; version 32.0.1700.3 only; version 32.0.1700.4 only; version 32.0.1700.5 only; …
• Opensuse Opensuse: version 12.3 only; version 13.1 only

Published 2014-01-28. Last modified 2026-06-17.